Its dependency footprint is minimal and it has no install-time scripts. The compact source tree matches the package, but maintenance and basic project transparency remain weak.
32%
Total Score
50
100
67
88
This is the package's only release, published in May 2014, with no releases in the last 12 months. That long period without a new release is strong evidence of abandonment risk.
No license is declared, detected, or included in the package or linked repository. This creates a material adoption and redistribution concern.
The package has no README, tests, or changelog, although absent tests and changelogs are normal for published artifacts. The exact version has a GitHub release, which provides some release traceability.
The repository is owned by a user account rather than an organization, so there is no organization backing to compensate for the thin maintenance evidence.
There were no commits and no active maintainers during the last 3 months. Given the package's age, this supports a conclusion of inactive maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.